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THE Claims 

Tbt following is a listing of the claims with amendments, which are presented in 
accordance with revised 37 C.F.R- §1.121, 

1. (Currently amended) a m^rh^ f/>r ... -m . - .-i mrr nn.> nfp rnvidir^p; ^p9e<;<sih!litv to - a 

plurality of remote service providers across a network via a single login to a host service 
provider, each of the plurality of remote service providers being accessible through the hose 
service provider and each of the plurality of remote service providers having separate login 
procedures requiring data, the method comprising the sieps of: 

the hosi service provider receiving the single login from a user, the host service provider 
having a universal session manager; 

the universal session manager retrieving data from a validation database based on the 
single login to the host service provider, wherein the data is effective for accessing a selected one 
of the plurality of remote service providers, and wherein the data is based at least in part on the 
single login; 

the universal session manager transmitting said data to the remote service provider, the 
universal session xnanager and the remote service provider exchanging the data to effect a two- 
sided authentication; and 

the host service provider directing dte user to rhe remote service provider. 

2. (Original) The method of claim I , fuaher comprising the step of connecting to a 
trusted service provider having special access requirements, wherein 

a trusted service module acts as an intermediary between the host service provider and the 
trusted service provider, 
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3. (Original) The raerbod of claim 2. wherein ibe trusted service module receives a 
sessionID from ibe injsted service provider. 

4. (Original) The method of claim 3, wherein the trusted service module places a 
text file on the user's network data acquisition module, 

5. (Original) The method of claim 4, wherein said text file comprises a cookie. 

6. (Original) The method of claim I , funher comprising the step of registering the 
user with the remote service provider. 

7. (Currently ameaded) a ^ycr<^m far Accn ^ .unjp rQvj^j ppr aceessihilitv to ea^^a 
plurality of remote service providers via u single login to a host service provider, each of the 
plurality of remote service providers being accessible thiou^ the host service provider and each 
of the plurality of remote service providers having separate login procedures requiring data, the 
system comprising: 

a user system having a network data acquisition module; 
a plurality of remote service providers; 

a host service provider for receiving the single login, the host service provider having a 
universal session manager; 

the universal session manager receiving data from a validation database based on the 
single login to the host service provider, the universal session manager passing the data, which is 
required for access to the remote service provider, to the remote service provider, the universal 
session manager and the remote service provider exchanging the data to effect a two-sided 
authentication; and 

the validation database for storing the data for accessing the remote service provider, the 
universal session manager communicating with the validation database to obtain the data; and 
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wherein the host service provider directiv the user to ihe selected oae of the plurality of 
remote service providers using the data. 

8. (Canceled) 

9. (Previously presented) The system of claim 7, said validation database further 
storing information for registering the user with the remote service provider. 

10. (Original) Tl\& system of claim 7, ftjrther comprising a trusted service module 
thai serves as an intermediary between the host service module and a trusted service provider 

1 1 . (Original) The system of claim 10, wherein said trusted service provider is a 
jvmoie service provider with special access requirements. 

12. (Original) The system of claim 7, wherein the network data acquisition module is 
an Inietnet browser. 

13. (Original) The system of claim 7, wherein the remote service provider further 
comprises a registration module and a login module. 

14. (Original) The system of claim 13, wherein the login module receives die data for 
gaining access to the services provided by the remote service provider. 

1 5. (Original) The system of claim 1 3, wherein the registration module receives die 
data for registering a user with the remote service provider. 

16. (Previously presented) The method of claim U wherein the two-sided 
audieniication is a triple handshake. 

17. (Previously presemed) The method of claim 16, wherein die remote service 
provider is a distinct remote site trom the host service provider. 

1 8. (Previously presented) The system of claim 7, wherein the two-sided 
authenucation is a triple handsbajte. 
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19, (Previously presented) The method of claim I , wherein the validation database 
imnsniits data to the universal session manager of the host service provider indicating which 
services the user is enrolled. 

20, (Previously presented) The method of claim 1 , wherein the host service provider 
receiving the single login from the user is performed over a network. 

21 , (Previously presented) The system of claim 7, wherein the validation database 
tr4nsmits daia lo the univer&al session manager of the host service provider indicating which 
services die user is enroUed- 
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